CVE-2024-20302

Summary

CVE-2024-20302 is a vulnerability affecting Cisco Nexus Dashboard Orchestrator (NDO). It allows authenticated, remote attackers to modify or delete tenant templates due to insufficient access controls within the tenant security feature. A successful exploit requires a valid user account with write privileges and either a Site Manager or Tenant Manager role. This vulnerability could disrupt network traffic by allowing the attacker to manipulate templates under non-associated tenants.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.